Descope

Descope .well Known API

The .well Known API from Descope — 6 operation(s) for .well known.

GitHub OpenAPI

Operations 6

GET /.well-known/oauth-authorization-server/{projectId} Get project well-known configuration for oauth ending with projectID #
GET /{projectId}/.well-known/jwks.json Get Public Key to Validate JWT #
GET /{projectId}/.well-known/oauth-authorization-server Get project well-known configuration for oauth #
GET /{projectId}/.well-known/openid-configuration Get project well-known configuration for OpenID #
GET /{projectId}/{ssoAppId}/.well-known/openid-configuration Get project well-known configuration for OpenID (sso app) #
GET /.well-known/project-configuration/{projectId} Get general well-known project configuration #

Documentation

📖
Documentation
https://docs.descope.com/api
📖
Documentation
https://docs.descope.com/auth-methods
📖
APIReference
https://docs.descope.com/api/openapi-spec
📖
Documentation
https://docs.descope.com/manage
📖
APIReference
https://docs.descope.com/api
📖
Documentation
https://docs.descope.com/inbound-apps
📖
Documentation
https://docs.descope.com/scim
📖
Documentation
https://docs.descope.com/jwks

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/descope/refs/heads/main/openapi/descope-well-known-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/descope-well-known-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

descope-well-known-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Descope Apps .well Known .well Known API
  description: Descope API
  contact:
    name: Descope
    url: https://descope.com
    email: support@descope.com
  version: 0.0.1
servers:
- url: https://api.descope.com
  description: Descope Production
- url: '{customUrl}'
  description: Custom server URL
  variables:
    customUrl:
      default: https://api.descope.com
      description: Your Descope API base URL
security:
- Descope Project ID: []
  Descope Project ID:Refresh JWT: []
  Descope Project ID:Session JWT: []
  Descope Project ID and Management Key: []
  Descope Project ID:Access Key: []
tags:
- name: .well Known
paths:
  /.well-known/oauth-authorization-server/{projectId}:
    get:
      tags:
      - .well Known
      summary: Get project well-known configuration for oauth ending with projectID
      description: Get project well-known configuration for oauth ending with projectID
      operationId: GetWellKnownConfigurationAuthServerProjectSuffix
      parameters:
      - name: projectId
        in: path
        required: true
        schema:
          type: string
      - name: baseUrl
        in: query
        schema:
          type: string
      - name: ssoAppId
        in: query
        schema:
          type: string
      - name: mfa
        in: query
        schema:
          type: string
      - name: isThirdPartyApps
        in: query
        schema:
          type: boolean
      - name: usePreLoadedClaims
        in: query
        schema:
          type: boolean
      - name: claims
        in: query
        schema:
          type: array
          items:
            type: string
      - name: urlsWithProjectID
        in: query
        schema:
          type: boolean
      - name: mcpServerId
        in: query
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/sessionv1.WellKnownConfigurationResponse'
      x-publishYaml: sessionWellKnown
      x-order: 1
      security: []
      x-meta:
        title: Get project well-known configuration for oauth ending with projectID | Session Well Known
        description: Get project well-known configuration for oauth ending with projectID
        keywords: api, session well known
  /{projectId}/.well-known/jwks.json:
    get:
      tags:
      - .well Known
      summary: Get Public Key to Validate JWT
      description: Get project public keys for JWT validation
      operationId: GetWellKnownJWKS
      parameters:
      - name: projectId
        in: path
        required: true
        schema:
          type: string
      - name: certs
        in: query
        schema:
          type: boolean
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/sessionv1.JWKSResponseV2'
      x-publishYaml: sessionWellKnown
      x-order: 1
      security: []
      x-meta:
        title: Get Public Key to Validate JWT | Session Well Known
        description: Get project public keys for JWT validation
        keywords: api, session well known
  /{projectId}/.well-known/oauth-authorization-server:
    get:
      tags:
      - .well Known
      summary: Get project well-known configuration for oauth
      description: Get project well-known configuration for oauth
      operationId: GetWellKnownConfigurationAuthServer
      parameters:
      - name: projectId
        in: path
        required: true
        schema:
          type: string
      - name: baseUrl
        in: query
        schema:
          type: string
      - name: ssoAppId
        in: query
        schema:
          type: string
      - name: mfa
        in: query
        schema:
          type: string
      - name: isThirdPartyApps
        in: query
        schema:
          type: boolean
      - name: usePreLoadedClaims
        in: query
        schema:
          type: boolean
      - name: claims
        in: query
        schema:
          type: array
          items:
            type: string
      - name: urlsWithProjectID
        in: query
        schema:
          type: boolean
      - name: mcpServerId
        in: query
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/sessionv1.WellKnownConfigurationResponse'
      x-publishYaml: sessionWellKnown
      x-order: 1
      security: []
      x-meta:
        title: Get project well-known configuration for oauth | Session Well Known
        description: Get project well-known configuration for oauth
        keywords: api, session well known
  /{projectId}/.well-known/openid-configuration:
    get:
      tags:
      - .well Known
      summary: Get project well-known configuration for OpenID
      description: Get project well-known configuration for OpenID
      operationId: GetWellKnownConfigurationOpenID
      parameters:
      - name: projectId
        in: path
        required: true
        schema:
          type: string
      - name: baseUrl
        in: query
        schema:
          type: string
      - name: ssoAppId
        in: query
        schema:
          type: string
      - name: mfa
        in: query
        schema:
          type: string
      - name: isThirdPartyApps
        in: query
        schema:
          type: boolean
      - name: usePreLoadedClaims
        in: query
        schema:
          type: boolean
      - name: claims
        in: query
        schema:
          type: array
          items:
            type: string
      - name: urlsWithProjectID
        in: query
        schema:
          type: boolean
      - name: mcpServerId
        in: query
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/sessionv1.WellKnownConfigurationResponse'
      x-publishYaml: sessionWellKnown
      x-order: 1
      security: []
      x-meta:
        title: Get project well-known configuration for OpenID | Session Well Known
        description: Get project well-known configuration for OpenID
        keywords: api, session well known
  /{projectId}/{ssoAppId}/.well-known/openid-configuration:
    get:
      tags:
      - .well Known
      summary: Get project well-known configuration for OpenID (sso app)
      description: Get project well-known configuration for OpenID (sso app)
      operationId: GetSSOAppWellKnownConfigurationOpenID
      parameters:
      - name: projectId
        in: path
        required: true
        schema:
          type: string
      - name: ssoAppId
        in: path
        required: true
        schema:
          type: string
      - name: baseUrl
        in: query
        schema:
          type: string
      - name: mfa
        in: query
        schema:
          type: string
      - name: isThirdPartyApps
        in: query
        schema:
          type: boolean
      - name: usePreLoadedClaims
        in: query
        schema:
          type: boolean
      - name: claims
        in: query
        schema:
          type: array
          items:
            type: string
      - name: urlsWithProjectID
        in: query
        schema:
          type: boolean
      - name: mcpServerId
        in: query
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/sessionv1.WellKnownConfigurationResponse'
      x-publishYaml: sessionWellKnown
      x-order: 1
      security: []
      x-meta:
        title: Get project well-known configuration for OpenID (sso app) | Session Well Known
        description: Get project well-known configuration for OpenID (sso app)
        keywords: api, session well known
  /.well-known/project-configuration/{projectId}:
    get:
      tags:
      - .well Known
      summary: Get general well-known project configuration
      description: Get general well-known project configuration
      operationId: GetWellKnownProjectConfiguration
      parameters:
      - name: projectId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WellKnownProjectConfigurationResponse'
      x-publishYaml: sessionWellKnown
      security: []
      x-meta:
        title: Get general well-known project configuration | Session Well Known
        description: Get general well-known project configuration
        keywords: api, session well known
components:
  schemas:
    sessionv1.JWKSResponse:
      type: object
      properties:
        alg:
          type: string
        e:
          type: string
        kid:
          type: string
        kty:
          type: string
        n:
          type: string
        use:
          type: string
    WellKnownProjectConfigurationResponse:
      type: object
      properties:
        allowAuthHostingIframeEmbedding:
          type: boolean
    sessionv1.WellKnownConfigurationResponse:
      type: object
      properties:
        issuer:
          type: string
        jwks_uri:
          type: string
        authorization_endpoint:
          type: string
        response_types_supported:
          type: array
          items:
            type: string
        subject_types_supported:
          type: array
          items:
            type: string
        id_token_signing_alg_values_supported:
          type: array
          items:
            type: string
        token_endpoint:
          type: string
        userinfo_endpoint:
          type: string
        scopes_supported:
          type: array
          items:
            type: string
        claims_supported:
          type: array
          items:
            type: string
        end_session_endpoint:
          type: string
        revocation_endpoint:
          type: string
        token_endpoint_auth_methods_supported:
          type: array
          items:
            type: string
        registration_endpoint:
          type: string
        code_challenge_methods_supported:
          type: array
          items:
            type: string
        backchannel_logout_supported:
          type: boolean
        device_authorization_endpoint:
          type: string
        client_id_metadata_document_supported:
          type: boolean
        backchannel_token_delivery_modes_supported:
          type: array
          items:
            type: string
        backchannel_authentication_endpoint:
          type: string
        dpop_signing_alg_values_supported:
          type: array
          items:
            type: string
        request_parameter_supported:
          type: boolean
        request_object_signing_alg_values_supported:
          type: array
          items:
            type: string
        request_uri_parameter_supported:
          type: boolean
        grant_types_supported:
          type: array
          items:
            type: string
    sessionv1.JWKSResponseV2:
      type: object
      properties:
        keys:
          type: array
          items:
            $ref: '#/components/schemas/sessionv1.JWKSResponse'
  securitySchemes:
    Descope_Project_ID:
      type: http
      scheme: bearer
      bearerFormat: Project ID
      description: Project ID as bearer token.
    Descope_Project_ID_Refresh_JWT:
      type: http
      scheme: bearer
      bearerFormat: Project ID:Refresh JWT
      description: Project ID:Refresh JWT as bearer token.
    Descope_Project_ID_Access_Key:
      type: http
      scheme: bearer
      bearerFormat: ProjectId:AccessKey
      description: Project ID:Access Key as bearer token.
    Descope_Project_ID_Session_JWT:
      type: http
      scheme: bearer
      bearerFormat: Project ID:Session JWT
      description: Project ID:Session JWT as bearer token.
    Descope_Project_ID_and_Management_Key:
      type: http
      description: Project ID:Management Key as bearer token.
      scheme: bearer
      bearerFormat: ProjectId:ManagementKey
externalDocs:
  description: Descope Server
  url: https://docs.descope.com